On Tue, 2 Nov 2021 15:06:04 +0100, Stefan Skoglund
wrote:
>my point was that UTC doesnt change one whole hour in a leap.
UTC is not a time zone . Its value changes only when leap seconds are
introduced.
>IF two different people in different timezones installs each their own
>z15, if they pu
Ah ok, thanks again for clarifying.
- KB
‐‐‐ Original Message ‐‐‐
On Wednesday, November 3rd, 2021 at 7:39 PM, Jeremy Nicoll
wrote:
> On Wed, 3 Nov 2021, at 06:27, kekronbekron wrote:
>
> > Excellent, thank you!
> >
> > So it's likely that Seymour's answer had this hidden assumption t
The secure solution is to set up your target environment ahead of time. Do
you use a TKE?
Eric Rossman, CISSP®
ICSF Cryptographic Security Development
z/OS Enabling Technologies
edros...@us.ibm.com
Tieline: 295-6882 or (845) 435-6882
"Cameron Conacher" <03cfc59146bb-dmarc-requ...@listserv.ua
Yeah,
Don't encrypt original, or provide Master Encryption Keys to new environment.
I was hoping for the magical incantation for ADRDSSU to do exactly what I need
without me actually doing anything.
Thanks everyone,
…….Cameron
-Original Message-
From: IBM Mainframe Discussion List O
The OP already said that the new location has no master keys set up in the CEC
yet, so no encryption is available there at all.
Perhaps the old-fashioned way? IDCAMS REPREO to unencrypted sequential and
ADRDSSU DUMP the unencrypted sequential file for DEFINE/REPRO at the receiving
end. A bit
There are published ways of transferring your keys to read your encrypted files.
On Wed, Nov 3, 2021 at 6:25 PM Cameron Conacher
<03cfc59146bb-dmarc-requ...@listserv.ua.edu> wrote:
>
> The issue is we have a new environment.
> We need to move our data to the new environment.
> The new environm
We use PROGxx for APF, SYSLIB, and link list.
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of
Seymour J Metz
Sent: Wednesday, November 3, 2021 2:20 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Volume allocated to *MASTER*
[External Email. Exercise caution when clicki
The issue is we have a new environment.
We need to move our data to the new environment.
The new environment has no Master Encryption Keys. Yet.
I can read the original file (I have access).
I DUMP and send to the new environment and the file is encrypted, and without
keys, I cannot read it.
Perv
"If you use LNKLSTxx instead of PROGxx, during IPL, the system opens and
concatenates each data set in the order it was listed, starting with the
first-specified LNKLSTxx member. The system creates a data extent block (DEB)
that describes the data sets concatenated to SYS1.LINKLIB and their exte
Classification: Confidential
The first question is, of course, where is the "original" encryption occurring.
Hardware, "ICSF" or software.
Hardware = "the physical device" e.g. DS8000, TS7700.
"ICSF" using asymmetric encryption.
Software - self contained.
ADRDSSU offers the opportunity to supply
Or RES volume naming conventions are S1RS0x, where x is a number between 1 and
3.
We are IPL'ed on S1RS03, and the volume that is allocated is S1RS02. We
catalog all
RES volume datasets to '**'. However, there were two datasets, that were
part
of link list, cataloged to S1RS02. We reca
Is that something that your management allows? At some places that would be a
massive security violation.
From: IBM Mainframe Discussion List on behalf of
Cameron Conacher <03cfc59146bb-dmarc-requ...@listserv.ua.edu>
Sent: Wednesday, November 3, 2021
Wouldn’t that defeat the purpose of encryption if someone could just acquire an
encrypted file and ask a regular, readily available, program to decrypt it?
Sent from Yahoo Mail for iPhone
On Wednesday, November 3, 2021, 2:01 PM, Cameron Conacher
<03cfc59146bb-dmarc-requ...@listserv.ua.edu
Hello folks,
I have a situation here where I want to use ADRDSSU to DUMP a VSAM file (it is
encrypted) and then transfer the DUMP file to another system where encryption
is not supported.
When I restore the files in the target environment, the VSAM file shows as
encrypted, but since I have no ke
Link list allocations from IPL time do not have to hang around forever. There
are several ways to remove an allocation. My favorite way is to code two
SYS1.PARMLIB members and then just issue two MVS commands to bring them in.
Code a PROGLD member with contents:
LNKLST DEFINE NAME(LNKLST02) COP
On Tue, 2 Nov 2021 11:52:21 -0500, Paul Gilmartin wrote:
>z/OS shirks the issue by making user address spaces non-dispatchable during a
>leap second.
I wouldn't say "shirks". Perhaps "accommodates" might be a better word.
If you don't configure leap seconds in the timing network defintition
Richard,
I didnt read every single post on the topic, but did you say if this is the
SYSRES you are IPL'd from? Or an alternate that isnt supposed to be in use?
Also, saw your comments about the couple of hardcoded datasets in LINKLIST that
you fixed that were pointing at the volume. I tho
Nope
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of A T
& T Management
Sent: Wednesday, November 3, 2021 12:04 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Volume allocated to *MASTER*
[External Email. Exercise caution when clicking links or opening attachments.]
Is there a catalog, or some outher SYS1. dataset residing on the volume?
On Wednesday, November 3, 2021, 10:49:58 AM EDT, Seymour J Metz
wrote:
Yes, unless you had authorization to examine the running Master from IPCS.
There is an address space named MASTER; I don't know how many jobs
IBM-MAIN is a listserv-based online forum, and wikipedia does not consider
online fora, including wiki itself, to be reliable sources. Unfortunately,
neither I nor any other subscriber to IBM-MAIN controls the wiki rules or their
interpretations.
I ran into this before with the issue of CKD dri
W dniu 03.11.2021 o 15:02, Phil Smith III pisze:
Shmuel wrote:
No, if challenged you need a citation with claims about colloquial usage.
And IBM-MAIN posts aren't sufficient? Why not? That's pretty darned colloquial!
(Yes, I feel like we're going in circles here, but it's not your fault or
mi
Yes, unless you had authorization to examine the running Master from IPCS.
There is an address space named MASTER; I don't know how many jobstep tasks run
in it these day, but I suspect that it's still only one.
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
_
Actually, I was thinking of IPCS. MainView came up because Richard had access
to it.
For the TIOT, by "run" I meant examining successive entries rather than
following links. Alas, my guess turned out to not be the answer.
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
__
"Run the chain . . . " also assumes several things:
1. That you know how to follow a system control block chain
2. That you know how to use IPCS or similar memory-viewing software to follow
such chains
3. That you have access to use that memory-viewing software at all
4. That you have authorized
On Wed, 3 Nov 2021, at 06:27, kekronbekron wrote:
> Excellent, thank you!
> So it's likely that Seymour's answer had this hidden assumption that
> folks knew MainView.
I don't think that follows.
"Run the " is a common expression which I've known as
long as I used IPCS, where it'd mean chain thr
Shmuel wrote:
>No, if challenged you need a citation with claims about colloquial usage.
And IBM-MAIN posts aren't sufficient? Why not? That's pretty darned colloquial!
(Yes, I feel like we're going in circles here, but it's not your fault or
mine--it's that this requirement, while well-intentio
:) and that's where my brain starts to hurt, sounds like the engineer that had
the discussion with me about time, miles above my head, but very interesting.
he when a bit further talking about space / time and relativity, some big bang
theory - I shook my head in agreement like I understood, nod
I am guessing that there is an entry in the ALLOCAS device usage tables and
that at some point after the last IPL, this device was used by the system for
something important (maybe XCFAS/LLA related - but maybe not) and the device
usage entry has not been removed.
It is also possible that this
Paul Gilmartin wrote:
>z/OS shirks the issue by making user address spaces non- dispatchable
>during a leap second.
That's one option, the less commonly chosen one. You would choose this
option if you need your z/OS environment to have highly accurate time that
fully reflects the leap second the
29 matches
Mail list logo
